This spotlight is part of our MCP company spotlights, within The MCP Guide. Building an MCP company? See SEO and GEO for MCP companies.
TrueFoundry sells an AI gateway for companies, and MCP is one of its parts. The MCP Gateway gives teams one place to find approved MCP servers, sign in with company identity, and get access through roles and approvals. Every call is logged.
Checked against: TrueFoundry's MCP Gateway page on 28 October 2026. eSEOspace did not test TrueFoundry's products.
Key Takeaways
- TrueFoundry says its gateway lets you "discover and connect all authorized MCP Servers, internal or third-party."
- It supports login through Okta, Azure AD and other identity providers, plus RBAC policies per server.
- Approval flows "control which roles can access each MCP Server."
- The free Developer plan covers 3 users and 5 MCP servers; Pro is $25 per user per month.
- TrueFoundry says it meets SOC 2, HIPAA and GDPR standards, and Enterprise adds VPC and on-prem options.
At a glance
| Item | Detail |
|---|---|
| Company | TrueFoundry |
| What it offers for MCP | MCP gateway, MCP server registry, RBAC, approval flows, tracing |
| Who it's for | Mid-size and larger companies that need approvals and audit |
| Open source? | No |
| Pricing | Developer free; Pro $25/user/month; Enterprise custom annual |
| Founded / HQ | San Francisco, CA address in footer (Ensemble Labs Inc); founding year not stated |
What TrueFoundry offers for MCP
Registry and discovery
The MCP Gateway page says you can "manage your MCP Server inventory from a centralized portal." That covers internal servers and third-party ones in one list, so staff don't hunt for URLs.
Sign-in and access control
TrueFoundry supports "federated login via Okta, Azure AD, and other IdPs." It also supports OAuth 2.0 with "dynamic discovery to secure tokens." Admins can "apply RBAC policies per MCP Server," where RBAC means role-based access control. Approval flows decide which roles may use each server.
Logging and tracing
TrueFoundry says "every action is logged & every request is traceable." You can trace each MCP server call, agent decision and model request. Views can be filtered by user, tool, team or cost.
Deployment
The page says you can deploy TrueFoundry in "VPC, on-prem, air-gapped, or across multiple clouds." On the pricing page, those options sit on the Enterprise plan.
Agents from other platforms
TrueFoundry's documentation index includes guides for routing Microsoft Copilot Studio, Microsoft Foundry, AWS Bedrock AgentCore and Snowflake Cortex agents through the MCP Gateway. The goal, per those guides, is that each tool call carries a verifiable user or agent identity. A 26 October 2026 notice also deprecates the tool_settings field in favor of tool_policy and tool_metadata.
Who it's for
TrueFoundry fits companies that want a request-and-approve process before teams use a server. Its per-user pricing also suits teams that want a predictable bill. TrueFoundry says it is "trusted by 30+ enterprises and Fortune 500 companies" and shows logos including Cargill and Aviva. If you are writing approval rules for the first time, start with our MCP governance guide for IT leaders.
Pricing
TrueFoundry's pricing page listed three plans on 28 October 2026:
| Plan | Price | Users | Included requests | Log retention | MCP Gateway |
|---|---|---|---|---|---|
| Developer | Free | Up to 3 | 10,000 per user a month | 7 days | Up to 5 MCP servers |
| Pro | $25 per user a month | Unlimited | 20,000 per user a month, pooled | 30 days | Full access |
| Enterprise | Custom annual commitment | Unlimited | Custom | Custom | Full access |
Pro overage is $20 per extra 100,000 requests. Model-provider charges are billed separately. VPC, on-prem and data residency options are Enterprise only.
Security and trust
The gateway page says TrueFoundry meets "SOC 2, HIPAA, and GDPR standards to ensure robust data protection" and shows matching badges. Ask for the SOC 2 report and confirm which plans include HIPAA terms. The free tier keeps logs for only 7 days, which may be too short for audits. For more on what to log and why, see MCP gateways explained.
Alternatives
- Kong prices by request volume and also maps REST APIs to MCP tools.
- Runlayer adds runtime scans and shadow AI detection, with pricing via demo.
- Mintive (formerly MintMCP) is a managed gateway with role-based tool bundles.
TrueFoundry also appears in our list of MCP gateways. See all MCP company spotlights.
Next step
The free tier is enough to test registry, sign-in and approval flows with a small group. Map your roles and servers first. Our MCP readiness audit can help you list both before a pilot.
Frequently asked questions
Is TrueFoundry's MCP Gateway free?
There is a free Developer plan for up to 3 users. It includes the MCP Gateway, limited to 5 MCP servers, with 7-day log retention.
How much does TrueFoundry Pro cost?
Pro is $25 per user per month, with 20,000 requests per user pooled across the team. Extra requests cost $20 per 100,000.
Which identity providers does TrueFoundry support?
TrueFoundry says it supports federated login via Okta, Azure AD and other identity providers, plus OAuth 2.0.
Can I run TrueFoundry in my own cloud?
Yes, on Enterprise. TrueFoundry lists VPC, on-prem, air-gapped and multi-cloud deployment. Developer and Pro run as SaaS.
